codeflow
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the CodeFlow application from a public GitHub repository (braedonsaunders/codeflow) during the installation process. This is a standard operation for this utility.
- [COMMAND_EXECUTION]: The
scripts/install.shscript executes shell commands to perform a git clone and open the localindex.htmlfile using system openers (open, xdg-open, or powershell.exe). These commands are necessary for the skill's stated purpose of self-hosting the visualization tool. - [EXTERNAL_DOWNLOADS]: The
SKILL.mdfile references a hosted version of the application on Vercel (codeflow-five.vercel.app). As Vercel is a well-known service, this reference is considered safe.
Audit Metadata